Description

Information Security and Accreditation Officer, ESA Security Office (ESO), Directorate of Resources and Services.
Reporting functionally to the RNC-X Security Manager and hierarchically to the ESA Security Office, you will be responsible for the security activities related to the Directorate of Resilience, Navigation and Connectivity (RNC) Information Security Office, to ensure rigorous supervision of the correct management of information in terms of security, in accordance with the requirements of the ESA Security Directives. You will, in addition, be responsible for the coordination of the ESO security assurance Team in the RNC Directorate.  

The main ESO Interface will be the ESO Security Accreditation Manager in Brussels. 

Duties

As Accreditation Manager, your tasks and responsibilities, will include:

• ensuring proper coordination of the ESO RNC Security Assurance Team under the functional authority of the RNC-X Security Manager and in full coordination with ESO;
• coordinating with the RNC ESO Security Assurance Team the Directorate’s independent security risk analysis, which will include analysis and risk coming from RNC space programmes and RNC security-critical activities; 
• supporting the establishment of RNC security assurance status and ensuring the Directorate’s proper PL1/PL2 security implementation;
• supporting the achievement of programme security accreditation objectives and milestones.

As ISO (Information Security Office), your tasks and responsibilities, as defined in the ESA Security Directives, will include:

• ensuring the security of the Directorate’s information;
• implementing information security on the basis of security risk assessment; 
• defining and documenting the Directorate’s local policy on implementation of the assignment of the appropriate levels of protective marking to information in the form of the Security Marking Instruction;
• coordinating the development of a security marking equivalence matrix for the unclassified information managed within ESA space programmes and projects;
• identifying the security risk appetite for approval by the security risk owner and recommending the security risk response for approval by the security risk owner; 
• specifying and documenting the LSE security operating procedures (SECOPs) for approval by the ESA SAA;
• implementing the LSE SECOPs; 
• creating and providing the initial security briefing for newly appointed ESA staff and onsite contractor employees working within their Directorate;
• establishing, executing and maintaining a security awareness programme; 
• providing reports and recommendations for security improvements and lessons learned to the security risk owner and the ESA Information Protection Policy Officer;
• reporting any security breaches, vulnerabilities or anomalies in accordance with the Security Directives and policy on the management of security incidents;
• taking any necessary security actions to contain security breaches in the event of a security incident concerning the LSE for which you are responsible;
• assisting the ESA Security Office on the conduct of security incident investigation;
• coordinating with the CIS Project/System Security Officer(s) within the Directorate to ensure the proper implementation of the information protection requirements for the CIS within the Directorate;
• participating in the Agency-wide network of ISOs, convening twice a year as the ESA Security Board, coordinated by ESO;
• participating as auditors or inspectors as part of the ESA Security Office audit or inspection of Directorates for which the ISO is not responsible;
• analysing, in close cooperation with the ITT Initiating Authority, the sensitivity of the information to be provided to bidders in the scope of an ITT. 

Technical competencies

Behavioural competencies

Result Orientation
Operational Efficiency
Fostering Cooperation
Relationship Management
Continuous Improvement
Forward Thinking

For more information, please refer to the ESA Core Behavioural Competencies guidebook
 

Education and professional experience

A master’s in engineering is required for this post together with 4 years of relevant professional experience.  Alternatively, candidates with a bachelor’s degree, complemented by an additional four (4) years of relevant professional experience can be considered.

Additional requirements

• Substantial security and system engineering experience
• Strong background in cyber security, policy and standards
• Excellent organisational and stakeholder management skills
• Strong judgement, communication skills and willingness to travel